$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144804.roa File: AS144804.roa (raw, json) Hash identifier: /6+mcpSeDne0eeCIvmOAWlmHdB1LA9AuM6RSwhSpyd8= Subject key identifier: D1:05:24:1B:3D:DE:E3:67:DD:56:C5:FC:52:AA:5A:02:62:13:32:BE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 35FAF3730FFD3CEECE96A47C835476F96E932E93 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144804.roa Signing time: Wed 04 Mar 2026 06:20:35 +0000 ROA not before: Wed 04 Mar 2026 06:15:35 +0000 ROA not after: Wed 03 Mar 2027 06:20:35 +0000 asID: 144804 IP address blocks: 240a:a86a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:fa:f3:73:0f:fd:3c:ee:ce:96:a4:7c:83:54:76:f9:6e:93:2e:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:35 2026 GMT Not After : Mar 3 06:20:35 2027 GMT Subject: CN=D105241B3DDEE367DD56C5FC52AA5A02621332BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c8:65:6a:6d:11:7c:53:bb:2c:2c:25:2a:69: 3b:6b:7b:bd:9f:44:a5:61:cd:7f:b4:1b:6e:34:76: 05:f6:84:18:f7:86:7e:2e:eb:9c:9e:94:65:06:8b: a7:d0:d0:ed:06:65:5a:5f:8f:a7:6f:e4:33:d7:64: 29:b4:48:61:8e:db:93:48:2b:2e:cc:75:22:52:67: 77:35:e5:3c:0e:e5:41:43:8f:f8:57:b2:08:1d:64: be:83:f3:8e:17:4d:9a:b4:a5:3b:37:ef:16:06:36: 6d:13:60:e5:83:62:ad:c1:ee:5e:f9:45:85:c2:e2: 75:fc:fa:9d:7b:17:68:a8:42:66:f4:1f:0b:3a:4a: 55:6c:6d:42:3b:6d:96:e0:40:9c:dc:73:d0:49:4b: 09:19:6e:77:da:77:fb:db:ee:31:2a:23:db:df:14: 70:29:39:a7:ab:99:f2:c2:89:a7:2b:ff:45:32:4b: 63:88:e0:9b:d0:16:3d:34:b1:22:2b:6c:ec:72:a8: 33:f2:8a:4e:74:20:15:4b:48:6e:02:45:c6:47:ec: 42:df:3d:34:00:f8:1b:93:78:c9:6e:5b:97:63:f3: 4a:87:20:61:a1:d7:43:45:4c:5b:a3:95:ba:53:f4: 02:b6:fe:1b:70:9c:1c:59:88:07:08:35:b2:bd:13: 78:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:05:24:1B:3D:DE:E3:67:DD:56:C5:FC:52:AA:5A:02:62:13:32:BE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144804.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a86a::/32 Signature Algorithm: sha256WithRSAEncryption 88:4d:35:2a:33:7f:14:72:34:73:4c:b0:07:5f:93:b5:89:9e: bf:b1:6f:87:fc:57:14:56:1e:c4:33:b2:de:02:f4:7c:d3:b9: 36:c3:1b:8b:4e:a5:a7:18:d5:1c:55:cc:20:e3:9e:25:93:4a: 0c:17:2e:51:5e:96:96:c7:7c:fb:72:87:1e:41:b4:7a:f3:1d: 3a:fd:08:aa:ed:86:83:1d:d4:af:bd:27:c0:f2:b3:99:22:d2: 38:fa:06:fe:7f:8c:c8:62:b7:71:48:06:99:89:cb:e5:0d:8a: 1c:37:0b:a8:65:13:33:c9:fc:5e:9f:f6:ee:ab:b4:c4:63:02: ef:ac:04:80:52:d9:1a:28:55:02:dc:cb:1f:b5:6e:cf:9e:a7: f1:23:16:42:ef:2d:86:19:ef:4d:4f:52:46:a5:10:65:81:a8: 1c:6b:c3:f6:33:15:83:51:7d:8c:d2:cf:36:a5:bd:d6:31:a7: 07:2b:5e:53:b7:cd:c2:a8:e1:7a:16:7e:3f:61:7a:35:8e:2f: 19:46:60:1e:f6:e0:6c:54:36:ca:ca:0b:62:05:b3:ca:91:88: 6d:d4:d1:7c:ed:f0:ea:04:4a:93:bf:fd:cd:cb:50:f5:af:ac: a5:67:73:6a:1c:4d:12:c0:51:c9:17:c8:60:05:7c:5a:4a:2b: 81:87:f1:3f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNfrzcw/9PO7OlqR8g1R2+W6TLpMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUzNVoX DTI3MDMwMzA2MjAzNVowMzExMC8GA1UEAxMoRDEwNTI0MUIzRERFRTM2N0RENTZD NUZDNTJBQTVBMDI2MjEzMzJCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOTIZWptEXxTuywsJSppO2t7vZ9EpWHNf7QbbjR2BfaEGPeGfi7rnJ6UZQaL p9DQ7QZlWl+Pp2/kM9dkKbRIYY7bk0grLsx1IlJndzXlPA7lQUOP+FeyCB1kvoPz jhdNmrSlOzfvFgY2bRNg5YNircHuXvlFhcLidfz6nXsXaKhCZvQfCzpKVWxtQjtt luBAnNxz0ElLCRlud9p3+9vuMSoj298UcCk5p6uZ8sKJpyv/RTJLY4jgm9AWPTSx Iits7HKoM/KKTnQgFUtIbgJFxkfsQt89NAD4G5N4yW5bl2PzSocgYaHXQ0VMW6OV ulP0Arb+G3CcHFmIBwg1sr0TeNUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTRBSQb Pd7jZ91WxfxSqloCYhMyvjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDgwNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qGowDQYJKoZIhvcNAQELBQADggEBAIhNNSozfxRyNHNMsAdfk7WJnr+xb4f8VxRW HsQzst4C9HzTuTbDG4tOpacY1RxVzCDjniWTSgwXLlFelpbHfPtyhx5BtHrzHTr9 CKrthoMd1K+9J8Dys5ki0jj6Bv5/jMhit3FIBpmJy+UNihw3C6hlEzPJ/F6f9u6r tMRjAu+sBIBS2RooVQLcyx+1bs+ep/EjFkLvLYYZ701PUkalEGWBqBxrw/YzFYNR fYzSzzalvdYxpwcrXlO3zcKo4XoWfj9hejWOLxlGYB724GxUNsrKC2IFs8qRiG3U 0Xzt8OoESpO//c3LUPWvrKVnc2ocTRLAUckXyGAFfFpKK4GH8T8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:33 2026 by rpki-client